Overview

overview

10

Static

static

3

32e19a3679...18.exe

windows7-x64

10

32e19a3679...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    32e19a3679f4060f6d38baaee2ec222e_JaffaCakes118

  • Size

    132KB

  • Sample

    240710-ceqh6szdrn

  • MD5

    32e19a3679f4060f6d38baaee2ec222e

  • SHA1

    5d132828c9e44367fe27c0abe4dec4bf02e33721

  • SHA256

    28ec2c0f32d4470e700043ae8a2673e1b6f3349a837a93ec76a9899c72d98daa

  • SHA512

    1ed39f7fef1bc349860bdd0fd7d4ee3034023e145b8a1e1d5cd8ac8b83e9f223e20d88cc2b4e29ada45a9c14ce87679d4a755bed2379d06d40e805078b345f8b

  • SSDEEP

    1536:xixPceTIVCm+XFixXVG4e2JLBJ3Ue05znybzPe9jiwo7JaSh:yceTIVxCFixFG4e1ybG+wQj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      32e19a3679f4060f6d38baaee2ec222e_JaffaCakes118

    • Size

      132KB

    • MD5

      32e19a3679f4060f6d38baaee2ec222e

    • SHA1

      5d132828c9e44367fe27c0abe4dec4bf02e33721

    • SHA256

      28ec2c0f32d4470e700043ae8a2673e1b6f3349a837a93ec76a9899c72d98daa

    • SHA512

      1ed39f7fef1bc349860bdd0fd7d4ee3034023e145b8a1e1d5cd8ac8b83e9f223e20d88cc2b4e29ada45a9c14ce87679d4a755bed2379d06d40e805078b345f8b

    • SSDEEP

      1536:xixPceTIVCm+XFixXVG4e2JLBJ3Ue05znybzPe9jiwo7JaSh:yceTIVxCFixFG4e1ybG+wQj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks